Exploitation in the Wild of wp2shell
Wiz Research has identified exploitation of "wp2shell", a critical pre-auth RCE vulnerability chain impacting WordPress Core (CVE-2026-63030 & CVE-2026-60137). Attackers are deploying persistent webshells on vulnerable servers. Organizations should prioritize patching or applying WAF mitigations.
- Product
- WordPress core
- Exploitation
- observed in the wild
- Exposure class
- Web platform
Why it ranks 44 (Notable)
- Exploitation observed in the wild
- Product class: web platform
- Covered by 7 independent sources
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Wiz Research (wiz.io)
- CVE-2026-63030 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-60137 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.